Logging of Microsoft Live Communication Conversations

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - access denied, no security tab I'm running windows server 2003 and cannot access a folder (access denied message). When I right click and properties the folder, there is no security tab (only General, ,Customize and NFS sharing). This is not XP, so the simple file sharing doesnt exist, and its obviously an NTFS drive as its windows server I'm running. the parent folders and all other folders are fine, just one folder out on its own not letting anyone play with it.... Any ideas on what can cause this or how it can be fixed??? Tag: Logging of Microsoft Live Communication Conversations Tag: 97318
  - 2
    - Looking for Single Sign on (SSO) solution Hi ! I'm looking for a single sign on (SSO) solution suitable for an hospital environment. I has to be based on Active Directory. It has to control/automate login in Windows, Outlook, web (IE) applications and many classical Windows applications. Ideally it would make use of XP fast user switching. I would like to have an autenthication device working with proximity detector (RFID, BlueTooth or whatever technology). Any idea about commercial or open source product ? -- Francois PIETTE http://www.overbyte.be Tag: Logging of Microsoft Live Communication Conversations Tag: 97317
  - 3
    - is it true... that an Enterprise Root CA has to be a domain controller? What about subordinates? Tag: Logging of Microsoft Live Communication Conversations Tag: 97315
  - 4
    - Standalone vs Enterprise root CA security. I have a Root and a subordinate stnadalone CA in my enterprise. I also have a 3rd subordinate which is issuing certificates from the 2nd subordinate which has been setup as an Enterpise subordinate. I was told that the Root and the 1st subordinate where setup as Standalone for security reasons but no one can tell me those reaosns. Can anyone tell me the difference in security between these. Tag: Logging of Microsoft Live Communication Conversations Tag: 97314
  - 5
    - Spyware, Anti-Virus and Microsoft update frustration I am looking for some honest help! I have a HP Pavilion ze4500 notebook, which I received for free from my father in-law, and it has more problems than I know what to do with. I started by just trying to update Windows and upgrade to Internet Explorer. I have so many popups it's not even funny. I can barely get anything done. So I went and purchased Norton Anti-Virus 2008, and it is telling me I need to download the Service Pack 2. When I try to download that, I then get an error # 0x80072ee7. I can not for the life of me get this problem solved, I am not that computer smart, and so I am looking for some assistance. I desperately need to get something done about this computer, because all of the advertisements on webpages are now being replaced w/ some nasty photos that I do not want to see. The computer is also popping up an out of Memory box when I first open up my internet explorer window. If anyone can help me out in some way, I would greatly appreciate it, and please let me know if you notice a scammer replying to my message trying to help. Thanks again :) Tag: Logging of Microsoft Live Communication Conversations Tag: 97309
  - 6
    - Protect password in batch file I need to use the net use command in a batch file that will be run automatically, to ensure that a mapped drive is connected. My question is, how can I avoid having the password to the mapped share appear in plain text in the batch file? Thanks. Tag: Logging of Microsoft Live Communication Conversations Tag: 97304
  - 7
    - read only attribute I believe there was a recent Automatic Update loaded to my computer, and today I noticed that EVERY file and folder on my computer is now set with the READ ONLY attribute. Is this somehow considered a good thing for security ? If this is something to do with a security update, can I disable it ? I really do have files that I need to change frequently. If it is not a security update, is it some sort of weird attack on my computer ? Tag: Logging of Microsoft Live Communication Conversations Tag: 97296
  - 8
    - CLM client reports - Invalid Smartcard Serial Number I am having a trouble getting my install of CLM 2007 w/ FP1 working. From the CLM client (running on Win XP SP3) I am trying to read a Gemalto .NET smart card. The message I get is "Invalid smart card serial number. Smart card information not available for the suppield smart card." The Gemalto utilities have no problem reading the card on this host. I am not sure what to make of this message - presumably the CLM client read the card, did some analysis and had a problem with s/n? Really I would like to know if it is a message I can ignore or not. This is a new deployment of CLM in a lab setting, new cards, no certs have been issued yet. Thanks, -Wes Tag: Logging of Microsoft Live Communication Conversations Tag: 97294
  - 9
    - Certificate Server Not sure this is the right place to post this, but did not really find anywhere else to post this question. We have an internal ca running and one of our certificate servers is having trouble with the certsrv website. The server is giving out certificates that are set to autoenroll so the certificate services are working correctly. When we try to access the http://servername/certsrv we get a 401.2 error and in the security log on the server I get a event id 553 failure audit with request type of krb_ap_req with the account I am using to authenicate to the site and then the caller user name is network service. The network service account is what we are using for the default app pool and when I change the account in the app pool the caller user name changes in the failure audit. Any help would be greatly appreciated Richard Tracy Tag: Logging of Microsoft Live Communication Conversations Tag: 97292
  - 10
    - Auditing shared folder Hello IÂ´m currently audinting a shared folder on my domain, Windows 2003 Server, and i get security sucess like, 560,567, i get when an user access to the folder but how can i tell, in an easy way, or translate that information into something understandable.For Example: John Q, access DATA Folder and read Test.doc file. I hope that I explain myself enough, i mean, that another human being could understand what i meant. If not, please give me another shot, IÂ´ll try again. Thanks for reading and even more for helping me. Greetings, bye Tag: Logging of Microsoft Live Communication Conversations Tag: 97291
  - 11
    - strange log on username appearing x-no-archive: Well this is a strange one. Every now and then when i go to log onto something (ie groups) when I hit a certain letter a username that is meaningless comes up for me (ie "username@domain.com"). Since I live alone there is NO chance that someone used it and my computer remembered it. Furthermore I delete all filed and passwords cached, now & then. What is even stranger is the domain name contained in the address DOESN'T EXIST according to godaddy or internic. Thoughts? Ideas as to what this is about? Tag: Logging of Microsoft Live Communication Conversations Tag: 97288
  - 12
    - Excellent website for IT SECURITY PROFESSIONALS Excellent website for IT SECURITY PROFESSIONALS, http://securityrules.blogspot.com Have fun. Tag: Logging of Microsoft Live Communication Conversations Tag: 97287
  - 13
    - phishing scam I descovered that i was involved in a scam. My pc started acting up last friday by not allowing recieveing email Then i was going to update my check book on Quicken, and it would'nt let place numbers on the register. When I did put an entry in I noticed the screen would blink and the new data would disappere . I went to my ISP web site and did some looking in their help page and discovered an ALEART message about an email being sent about asking to update your profile. It said it was from my provider so I updated my profile. (wrong thing to do ). My question is how do I remove this thing that is infecting my pc. Also I have already put a fruad alert out to the credit reports. Any help out there. Thanks Larry Tag: Logging of Microsoft Live Communication Conversations Tag: 97284
  - 14
    - The Difference Between Adware, Spyware and Anti-virus.(spyware spyware blockers, http://syubrawi.com/spyware-blockers Adware, spyware and computer virus share some similarities, one of which is that all three are major nuisances for computer users. Let's differentiate the three. Spyware is software that does not intentionally harm your computer. What they do is that they create pathways wherein someone else aside from the computer owner can communicate with the computer. Normally spywares record the various types of web sites you visit which are later used by web advertisers to allow them to send you unwanted emails and pop-ups. This is why spyware are usually frowned upon and greatly avoided. They are more intrusive than adware. Spyware have their own separate executable programs which allow them to record your keystrokes, scan files on your hard disks and.....more information visit us at : http://syubrawi.com/spyware-blockers see also : http://www.syubrawi.com -spyware blockers- Tag: Logging of Microsoft Live Communication Conversations Tag: 97268
  - 15
    - RMS - Protectiing documents programmatically Hi All, Sorry for posting an OT in this group. But please help me if possible, as i am deperately trying to find an answer for this. Here are the details: *********************** Question: How to protect an existing MS Word document programmatically with RMS. (The location of the document can be in some public FileShare, which it is accessible to the user). ENVIRONMENT: I have Windows 2003 RMS SP2 (RMS SERVER), Active Directory on Windows 2003 (AD) and Microsoft Office 2003, RMS SDK, RMS Client installed on another Windows 2003 OS (RMS Client) SET UP: I have successfully installed the RMS Server (in pre- production mode) and I am able to run couple of sample code provided with RMS SDK. The machine activation code works fine, where as User activation only works for temporary activation else it throws an error. I am able to protect a document using Office 2003 application but on a different set up (production mode). I have looked in the RMS Client SDK which has information on creating Publishing/Consuming Application. But what I understand is, the Consuming Application should know, how to read the protected content, the location of Issuance License etc. In the SDK,DRMEncrypt function encrypts the data provided, but how to save the encrypted information is not specified anywhere. I assume that, those particulars are dependent on the consuming application. In case of Word documents the consuming end is Word 2003, so the protected document has to be in a format which can be understood by Office 2003. Is there any way to achieve this using the SDK? Or should I use some other SDKs/libraries provided by some-one else? What I need is either some documentation or an API or sample code that will allow me to create rights managed documents (using the RMS policy already available in the AD or creating a new RMS Policy.) that MS Word will understand and enforce. Can anyone help me to solve this? ~Thanks and regards Reghu Tag: Logging of Microsoft Live Communication Conversations Tag: 97265
  - 16
    - downloading .exe files Windows will not let me download .exe files.As soon as download finishes it says it "this file is potentially harmful" and "has blocked access to this file".The file does not appear in the "my downloads" folder. How do I tweak Windows XP so I can download useful utilities ? Tag: Logging of Microsoft Live Communication Conversations Tag: 97256
  - 17
    - Question on - Network Access: Do not allow anonymous enumeration of SAM accounts and shares Gurus, How much of a security risk are these Windows security settings pose if they are allowed? I am not looking for a security exposition, just a few quick thoughts? Network Access: Allow anonymous SID/Name translation Network Access: Do not allow anonymous enumeration of SAM accounts Network Access: Do not allow anonymous enumeration of SAM accounts and shares -- Spin Tag: Logging of Microsoft Live Communication Conversations Tag: 97255
  - 18
    - Audit Privilege Use - Windows 2003 Security Guide Hello, I'd like some clarification on auditing privilege use on Windows 2003. I'm currently performing some security testing. On a Windows 2003 Server within the Local Security Policy > Local Policies > Audit policy I have enabled both success and failure auditing for 'Audit Privilege Use'. No Group Policy is in use. To test the setting, I have logged on to a server as an administrator, reset the system time and performed a shutdown. The events are logged as expected. I then log on as a non-administrative user who does not have rights to change the system time or to shut the system down. Using the non-admin user account, I attempt to change the system time and also attempt to shut the system down. Nothing is logged within the security log. The Windows Server 2003 Security Guide states 'Failed use of a user right is an indicator of a general network problem, and can often indicate an attempted security breach' It would appear that the Audit Privilege Use auditing doesn't actually pick up on people trying to perform actions for which they do not have rights, is this correct ? So the failure auditing option would only indicate that a user who has the required privileges have failed to use them and therefore this is much more likely to be a configuration (or other technical) problem rather than an attempted security violation ? Thanks in advance for any help / thoughts offered. Cheers, Gareth Tag: Logging of Microsoft Live Communication Conversations Tag: 97253
  - 19
    - TCP Chimney - what is it and why did I have to disable it prior to a netmon trace? Gurus, In troubleshooting for MS support recently on a case I opened with them, I was told to disable tcp chimney (since I was running Windows Server 2003 SP2) prior to capturing a netmon trace. I am not sure why I had to disable tcp chimney prior to capturing a netmon trace let alone what tcp chimney even is. Any ideas? -- Spin Tag: Logging of Microsoft Live Communication Conversations Tag: 97245
  - 20
    - Group Policy Management Console, GPMC for Vista with SP1 Hello! Did anybody know when the new Group Policy Management Console, GPMC for Vista with SP1 will be available? The Existing Group Policy Management Console, GPMC will be deinstall with the SP1. -- Mit freundlichen GrÃ¼Ã?en / Kind regards, A l e n A h j a Huelsenberg Holding GmbH & Co. KG An der MÃ¼hlenau 4 - 25421 Pinneberg Tag: Logging of Microsoft Live Communication Conversations Tag: 97240
  - 21
    - Windows Server 2008 CA Hi, I have installed Windows Server 2008 Enterprise Root CA and Subordinate CA. Windows Vista based PCs enroll certificate or IE on Windows Vista is capable for web enrollement. Windows XP (SP2) based PCs do not enroll certficate or IE (7.0 or 6.0) on Windows XP is not capable for web enrollment. IE (7.0 or 6.0) on Windows XP di not work on SSL web site by signed Windows Server 2008 CA Mozilla Firefox on Windows XP (SP2) is working on SSL web site by signed Windows Server 2008 CA -- YAHYA YAZICI MCSE-M , MCSE-S, MCTS, MCT Morten Bilgi ve Ýletiþim Hizmetleri Ltd. Þti Web: www.btegitim.com Ofis: +90 212 274 69 98 Fax: +90 212 267 46 25 E-mail: yahya@btegitim.com Tag: Logging of Microsoft Live Communication Conversations Tag: 97238
  - 22
    - Windows Defender Hello: The Windows Defender program that I have installed on my computer system is not running its scheduled scan time on a daily basis. How can I get the Windows Defender program to run its scheduled scan time on a daily basis, because I do have the scan time set at 11:00 am daily? Thank You, Tag: Logging of Microsoft Live Communication Conversations Tag: 97236
  - 23
    - Implementing EFS What is the best way to implement EFS to encrypt 500GB of data-at-rest stored on a NAS server that is sitting in a backend domain/DMZ. This share has to be accessed by web servers sittings on a front end domain/DMZ. The DMZs are separated by a FW that only allow traffic over specific ports between these domains. We do not have PKI implemented at the enterprise in this network setup. Do we need to have PKI for EFS? Tag: Logging of Microsoft Live Communication Conversations Tag: 97231
  - 24
    - Revoke a CA Hello, I am new to dealing with certificates and am having an issue with a renewed CA certficate. In 2003 IAS, right clicking the server, properties, general tab. There is a list of CA certficates. We have 3 listed. 2 were accidentally created when attempting a renew. How do you revoke them? I went into the issued certificates and looked up the admin who did the renew and found two certificates by him. I revoked them with a "hold" but that apparently was not it as the CA certificates still showed up. Thanks, Tag: Logging of Microsoft Live Communication Conversations Tag: 97229
  - 25
    - mrtstub.exe when I try to run/extract the windows malware removal tool kb I get the error YOU ARE NOT PERMITTED TO EXECUTE THE FOLLOWING PROGRAM c:\.209... \mrtstub.exe. PLEASE CONTACT ADMINISTRATOR... HOW CAN I INSTALL MALWARE REMOVAL TOOL THEN? Tag: Logging of Microsoft Live Communication Conversations Tag: 97221
- Next
  - 1
    - Account logon time restriction violation I have several of the event below happening with different users from their respective workstations happening over night when we are certain that the users are not in the office and have no way of physically accessing their computers. Is there a legitimate reason for these types of failure audit events? If not, how can I track down the source of the issue and ensure there are not security problems going on? Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 530 Date: 3/31/2008 Time: 5:36:30 AM User: NT AUTHORITY\SYSTEM Computer: BDCServer Description: Logon Failure: Reason: Account logon time restriction violation User Name: JoeSchmoe Domain: ORGDOMAIN Logon Type: 3 Logon Process: NtLmSsp Authentication Package: NTLM Workstation Name: OrgWorkstation Tag: Logging of Microsoft Live Communication Conversations Tag: 97218
  - 2
    - Microsoft Award Email I received the following email. Is it valid? Microsoft Award Team 20 Craven Park, Harlesden London NW10 United Kingdom FILE REF: HL/5564/06/07/MICS BATCH: MC11/834/5PDH /EU OFFICIAL WINNING NOTIFICATION The prestigious Microsoft and AOL has set out and successfully organised a Sweepstakes marking the new year anniversary for 2008, we rolled out over Ð?450.000.00 (Four Hundred and Fifty Thousand pounds sterling) Draws. Participants for the draws were randomly selected and drawn from a wide range of web hosts which we enjoy their patronage. Your email address as indicated was drawn and attached to ticket number 008795727498 with serial numbers BTD/9080648302/06 and drew the lucky numbers 14-21-25-39-40-47(20) which subsequently won you Ð?450.000.00 (Four Hundred and Fifty Thousand pounds sterling) as one of the jackpot winners in his draw. You have therefore won the entire winning sum of Ð?450.000.00GBP (Four Hundred and Fifty Thousand pounds sterling) These are your identification numbers:MCS-26799/097 CATEGORY NO.OF WINNERS WINNING PRIZES 1st. 2 Ð? 500,000.00 pounds each 2nd. 8 Ð? 350.000.00 pounds each 3rd. 13 Ð? 250,000.00 pounds each 4th. 27 Ð? 170,000.00 pounds each CLAIMS REQUIREMENTS: 1. Full names: 2. Residential address: 3. Phone number: 4. Fax number: 5. Occupation: 6. Sex: 7. Age: 8. Nationality: 9. Present Country: 10.Next of kin name/address: Mode Of Price Remittance. (1)Cash Pick-Up (You coming Down to Uk Personally to Pick Your Price). (2)Courier Delivery Of your Certified Winning Cheque Name and other Winning Documents safely to you. FOREIGN TRANSFER MANAGER MR BARRY ASHLY MICROSOFT SECURITY DEPARTMENT (UK). E-mail:barry.ashly@hotmail.co.uk The Microsoft Internet E-mail lottery Awards is sponsored by our CEO/Chairman, Bill Gates and a consortium of software promotion companies. The Intel Group, Toshiba, Dell Computers and other International Companies. The Microsoft internet E-mail draw is held periodically and is organized to encourage the use of the Internet and promote computer literacy worldwide. Once again on behalf of all our staff, CONGRATULATIONS! Sincerely, MR.BARRY ASHLY M.S.PRO. ZONAL COORDINATOR. Tag: Logging of Microsoft Live Communication Conversations Tag: 97209
  - 3
    - Microsoft Award I received the following email. Is is valid? Microsoft Award Team 59 Craven Park, Harlesden London NW10 United Kingdom Ref: UKNL-L/200-26937 Batch: 2005MJL-01 Dear Winner, CONGRATULATION! CONGRATULATION!! CONGRATULATION!!! The prestigious Microsoft and Aol has set out and successfully organised a Sweepstakes marking the year 2008 anniversary we rolled out over US$M40,459,864 for our end of year Anniversary Draws. Participants for the draws were randomly selected and drawn from a wide range of web hosts which we enjoy their patronage. The selection was made through a computer draw system attaching personalised email addresses to ticket numbers. If you ignore this, you will regret it later. Microsoft and AOL are now the largest Internet companies and in an effort to make sure that Internet Explorer remains the most widely used program, Microsoft and AOL are running an e-mail beta test. Your email address as indicated was drawn and attached to ticket number 20511465463-7644 with serial numbers S/N-00168 and drew the lucky numbers 14-21-25-39-40-47(20) which subsequently won you Â£1,500,000.00 (One Million Five Hundred Thousand Great Britain Pounds) as one of the 5 jackpot winners in this draw. You have therefore won the entire winning sum of Â£1,500,000.00 (One Million Five Hundred Thousand Great Britain Pounds) The draws registered as Draw number one was conducted in Brockley, London United Kingdom on this year 2008. These Draws are commemorative and as such special. Please be informed by this winning notification,to file your claims,you are to make contact with your designated agent who shall by duty guide you through the process to facilitate the release of your prize.To file for your claim Please Contact your delivery agency in the contact information below: DELIVERY AGENCY CONTACT INFORMATION NAME OF COURIER FIRM: CUSTODY CLAIM SERVICES OFFICE ADDRESS: 60 Great Ormond Street London,WC1N 3HR United- Kingdom. Email: johnmichel600@yahoo.co.uk Tele: + 44 702-408-4884 Fax: + 44 870 471 7517 Contact Person: Call Mr. John michel. You are advised to contact your fiduciary agent with the following details to avoid necessary delays and complications: VERIFICATION FORM FULL NAME:....................................................................................... FULL ADDRESS:................................................................................ NATIONALITY:.................................................................................. SEX:................................................................................................ AGE:................................................................................................ PHONE/MOBILE:.............................................................................. FAX:................................................................................................. OCCUPATION:................................................................................... COMPANY:...N/A............................................................................... BATCH/NUMBER............................................................................... LUCKY NUMBER................................................................................. TICKET NUMBER................................................................................ SERIAL NUMBER............................................................................... REFERENCE NUMBER......................................................................... Our special thanks and gratitude to Bill Gates and his associates.We wish you the best of luck as you spend your good fortune in this season. Note: You have One weeks from the date of this publication to claim your prize or you may forefeit your winnings.In compliance with the sponsoring bodies',you are to make a remittance of a part of your won fund,not lower than 5-percent, after receiving your allocation to a charity organisation. Thank you for being part of our commemorative yearly Anniversary Draws. Mr. John michel. Microsoft Promotion Team President Tag: Logging of Microsoft Live Communication Conversations Tag: 97208
  - 4
    - PKI (CA Hierarchy) and Hyper-V pros and cons Enterprise three-tier CA hierarchy on virtual machines? Or any part of hierarchy (offline or online CAs )? Is it bad idea? Any thoughts? Tnx a lot. Tag: Logging of Microsoft Live Communication Conversations Tag: 97206
  - 5
    - clm users certificates expiration Hello, What happend when clm users (clmagent, clmkragent and clmenrollanget) certificates expired? CLM can renew this users certificates or I need request renew for this users? Regards, -- Unai Castro MCP Windows 2003, XP, Exhcange 2003 Tag: Logging of Microsoft Live Communication Conversations Tag: 97202
  - 6
    - What's it in for the makers of free antivirus software? Gurus, Free antivirus software such as Avast http://www.avast.com and NOD32 http://www.eset.com are well spoken of. My question is, given that they are free, what's it in for the makers of this software? Because of this question, I am hesitant to switch off of Symantec or McAfee. -- Spin Tag: Logging of Microsoft Live Communication Conversations Tag: 97191
  - 7
    - Advanced Features I've set up my delegation just the way I want it for my help desk however now I want to prevent them from seeing advanced features, any ideas? -- Steve Tag: Logging of Microsoft Live Communication Conversations Tag: 97186
  - 8
    - Install program and policies. Hi, I have the following problem. I develop a library and I deploy this library with installshield. Users (colleagues) install it on their computers. Until yesterday, all ran perfectly. Now the policies have been changed, and the user cannot install anything on his computer. It's possible to change the policy to allow to install only a specific package? thank you, mirko Tag: Logging of Microsoft Live Communication Conversations Tag: 97171
  - 9
    - Program to Convert SDDL Security Descriptors Into Human Readable Form? Is there a utility that takes converts the very hard to read security descriptor format SDDL and converts it to a human readable format? For example, you can look at the DACL on the Windows Firewall service with the command: sc sdshow SharedAccess This gives the human unfriendly output (for example): D:(D;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;NU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;AU)(A;;CCLCSWLOCRRC;;;IU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY) I would like to find a utility that I could feed the above string to as input and have it output a parsed and easier to understand version to the DACL. -- Will Tag: Logging of Microsoft Live Communication Conversations Tag: 97166
  - 10
    - Auditing Terminal service: strange trouble Hi all! I've actived the auditing of terminal services but i've a strange trouble... I found a lot of connections but i've an hole in the sequences of connections, i've connections from rdp-tcp#3 to rdp-tcp#17 and after rdp-tcp#19 but i've a snapshot where i see rdp-tcp#18 but it isn't logged in the event log, is it possible? I've enabled the audit just running "actve directory user and computer" then i right click on the domain tree and i selected propriety, after that i clicked on group plocy and then on open button, in that window i do "create and link a GPO here" and i call it Audit, then i edited it and i goes to Computer config -> Windows settings-> local protection -> local policy -> audit policy -> and i've enabled "audit account logon events", "Audit logon events", "audit account management", "Audit system events" But after i activated it i don't see new terminal server connections in the event log.... Tag: Logging of Microsoft Live Communication Conversations Tag: 97161
  - 11
    - EFS Issue Ok, here's the thing. Back in the day we didn't use efs, and our first DC failed and was replaced. Only later did we find out the DRA cert was on this server, and we now needed to make a new one to get EFS to work. No problem, we created a DRA account, and made it and admin with the DRA cert. But a side effect of this is that we would have to go in and renew the cert in two years. So I caefully wrote down the password, and forgot about it for one year and 10 months. So now I go back, and I try to log into the DRA account, and it won't let me in. In spite of the fact I carefully wrote down the password in detail, it keeps telling me "The system can't log you on" and acts like the password is bad. The password is 16 charicters long, random, and highly complex, and can't be cracked (if you thing you can, please let me know). So; 1) What is going to happen when this cert expires? 2) Can I reset the password, and log in and renew the cert? 3) is there another way to renew this cert? Thanks all for your help :) Tag: Logging of Microsoft Live Communication Conversations Tag: 97148
  - 12
    - Terminal server log Hi all! I need to know if a windows 2003 SBS (the full version with SQL not the standard version) logs Terminal server connections and where are the logs, i need to know the ip address of a connection by terminal server and if is possible, what they do like data transfer and similar, I'm reading the event log of windows, but i don't foun anything of strange, i found only some try of a terminal server connection that try to connect some printers that server don't know and it haven't the right drivers... The windows 2003 server SBS is just installed, i haven't changed any policy about log on and terminal server and windows have all windows updated. Thank's for all! Tag: Logging of Microsoft Live Communication Conversations Tag: 97147
  - 13
    - Is this the right group to talk about EFS? I have a project ahead of me where I need to decrypt a few thousnd laptops that have EFS decryption for the users My Docs. I have a few questions and am wondering if this is the forum that best fits my needs. Can anyone comment if it is or not and maybe point me in the right direction? Tag: Logging of Microsoft Live Communication Conversations Tag: 97144
  - 14
    - King Cole... If the ICS option in MSIE is selected, the machine that is to be the host is the only machine that needs this enabled. NAT is enabled by the host to the clients. What about the host? Does it too have NAT to the Internet or is it exposed to the trolling bots, hacks etc? Is it possible to have a type of [single device router] NAT effect to the host using ICS? Tag: Logging of Microsoft Live Communication Conversations Tag: 97141
  - 15
    - About Troj_Agent.BIhkey_local_machine\software\microsoft.. My program NoAdware find that register every time that I run it and said that's dangerous. Even if I deleat the file it's come back every time. Should I be preoccupied and how can I could deleat for ever? Thank you very much French speaking Bob Tag: Logging of Microsoft Live Communication Conversations Tag: 97135
  - 16
    - Need Help With IPs to Authorize Windows Update I'm having some problems with firewall authorizations for Windows Update access in a DMZ. In general, I have had good luck getting access to Windows Update when you authorize passage of HTTP, HTTPS, and FTP to these networks: 131.107.0.0 / 16 207.46.0.0 / 16 64.4.0.0 / 18 65.52.0.0 / 14 In addition, I normally authorize these URLs for both http: and https: *.microsoft.com windowsupdate.microsoft.com *.windowsupdate.microsoft.com download.windowsupdate.com The problem I am having is that occasionally the DNS name "download.windowsupdate.com" resolves to some IPs on a huge network from the Limelight load balancing farm. When the client behind the firewall resolves that DNS to an IP, it then connects to the IP and the IP does NOT reverse back to the DNS name download.windowsupdate.com. Instead it resolves to some arbitrary name at the Limelight Network. So the firewall has no way of knowing that the connection is authorized. Further complicating all of this, download.windowsupdate.com does not always resolve to the Limelight load balancers. Microsoft appears to have these IPs pointing to load balancers all over the world. Some of the IPs I saw the download.windowsupdate.com domain name resolve to: 208.111.148.50 8.12.217.124 192.78.223.126 209.84.2.124 etc Microsoft provides a set of DNS names to use with the ISA firewall, and naturally that doesn't work for the IPs above because they don't reverse to Microsoft domain names. No way do I want to authorize the entire Limelight load balancing network into my DMZ. There are a huge number of IPs, and those are probably associated with many hundreds of different organizations. When I do a whois on the IPs Microsoft is using, nothing in the huge range of IPs returned suggests which subset of the range is reserved for Microsoft use. It would be really really nice for those of us who actually think about security if Microsoft would publish openly the range of IPs it is using for Windows Update. Failing that, I am open to ideas here about how can one set up a reasonable set of firewall rules to securely connect to this wideranging set of IPs. -- Will Tag: Logging of Microsoft Live Communication Conversations Tag: 97133
  - 17
    - Windows Defender/Windows Live One Care I formerly used Windows Defender, but it was apparently deleted when I installed Windows Live One Care. I still have the MsMpEng.exe process, however, with all it's grabby ways, which Task Manager shows as running when I notice drastic slowdowns on my machine. Is this process an essential part of Live One Care ? Would appreciate any help on this one. Tag: Logging of Microsoft Live Communication Conversations Tag: 97131
  - 18
    - which antivirus I realise that this question is a bit loaded given so many different opinions but you guys know best. I have read some previous postings but they go back a bit. Which antivirus (looking at bitdefender, NOD32, Karpensky... in their current version) provides best performance, checking & speed? I now run AVG 8 & wish to change or should I? I have read many reviews & it seems that Bitdefender is the one on top. Tag: Logging of Microsoft Live Communication Conversations Tag: 97125
  - 19
    - P2P highwayman gets four years for ID theft A Seattle man who admitted using file-sharing programs to pinch personal information on 50 people as part of an ID theft scam has been jailed for four years. Gregory Kopiloff, 35, pleaded guilty to mail fraud, computer hacking and aggravated identity theft offences at a hearing before the US District Court in Seattle in November. As part of a plea bargaining agreement, prosecutors dropped a second aggravated ID theft rap, an offence punishable on conviction by a mandatory two years behind bars in addition to any other sentence a convict might face. The judge called Kopiloff "a highwayman in the virtual world," AP reports. "People were traveling by and he was able to seize their assets, their personal identity," he added. ® (from The Register) Detail here: http://www.theregister.co.uk/2008/03/18/p2p_highwayman_jailed/ ----------------------------------------------------------------------------------- I'll be delighted to see *more* prosecutions - what do others think? BD Tag: Logging of Microsoft Live Communication Conversations Tag: 97121
  - 20
    - Slow Shutdown issue I was testing this Local Security Policy and noticed that some of setting after I changed, it will take from 6 sec. (before change) to 28 sec. (after the change), the funny thing is, if I put it back to the original state (Disable to Enable) or any other type of changes, it will not come back to 6 seconds anymore. I had to reset the Security Settings back to Default. e.g. Do not display last user name in logon screen. My question is, why the reverse setting did not work? Tag: Logging of Microsoft Live Communication Conversations Tag: 97115
  - 21
    - CAs: Enterprise root on parent domain, subordinate on child domain We want an infrastructure involving two CAs, an enterprise root CA on the parent domain and a subordinate CA to do all the work on the child domain. 1. Right now we're decomissioning our Enterprise Root off of the PDC on our Forest Root domain and want to create a brand new Enterprise Root CA on its own server. 2. On the child domain we want to build a subordinate CA and do all of the cert publishing off that box (nothing is on the parent domain which is also the forest root). 3. After the subordinate CA is set up, we can just power off the Enterprise root CA, correct? What about security updates? 4. What is the proper setup for this chain to work? Any special considerations or "gotchas" we need to know about? Thanks! Tag: Logging of Microsoft Live Communication Conversations Tag: 97104
  - 22
    - How can I stop spying on my conversations? There is someone on my Network uses a software to spy on Network Members' Conversations of Messenger. I think it called "IM Monitor MSN (or Yahoo) Spy". How can I stop him from spying on my conversations? Is there an antispy can help? -- Ragab Tag: Logging of Microsoft Live Communication Conversations Tag: 97101
  - 23
    - What's the Best Firewall out there for personal use? Hey I'm in the process of researching network security out there for an essay, and I just want some feedback for which is the best firewall to use for Windows XP (Just because Windows Vista might adapt differently to certain firewalls even though SP1 has been released). Cheers Tag: Logging of Microsoft Live Communication Conversations Tag: 97097
  - 24
    - A paper on Threat model Hello, I am looking for some information on Internet threat models for example MITM, blind attacker etc. Does anyone have pointers on the subject, maybe a paper that summarizes the capabilities of various attackers. Thank you, Efi Tag: Logging of Microsoft Live Communication Conversations Tag: 97095
  - 25
    - MBSA Script Error I'm a noob...I just installed Microsoft Baseline Security Analyzer 2.0.1, selected a group of servers to run against, and let it go. Once finished, everything looked well & good except for when I try to view the report on one server (of course, the one I care about the most). As soon as I click on the report, I get: Internet Explorer Script Error An error has occurred in the script on this page. Line: 70 Char: 5 Error: Object Required Code: 0 URL: file:///C:/Program&20Files/Microsoft%20Baseline%20Security%20Analyzer%= 202/r=ADeport.html Do you want to continue running scripts on this page? Whether I click Yes or No, I get a blank window. All other reports on all other servers (even ones which I believe are more or less identical) work fine. The server is 2003 Server SP1 (for now), I'm running MBSA from a Win XP SP2 machine fully updated running IE7. Ideas? Thanks. Tag: Logging of Microsoft Live Communication Conversations Tag: 97090

How do you log the IM conversations of end users in a corporation for
security purposes?

This is a loaded question, I'm sure. It is for Security.

Top

Re: Logging of Microsoft Live Communication Conversations by Dobromir

Dobromir
Thu Apr 10 17:03:28 CDT 2008

I guess it is more for compliance but that seems to converge with Security
these days.

Here is what you need:
http://download.microsoft.com/download/B/2/0/B208490C-57A3-4A09-9FFC-4AEB7AF3447C/LCSComplianceWhitePaper.doc

--
---
HTH,
Dobromir

Learn more about Security and Identity Management:
Visit http://www.iamechanics.com

"TeeCee" <TeeCee@discussions.microsoft.com> wrote in message
news:6DB4C0AF-44EF-4D5E-BE1F-9682187FB7DA@microsoft.com...
> How do you log the IM conversations of end users in a corporation for
> security purposes?
>
> This is a loaded question, I'm sure. It is for Security.

Top

Re: Logging of Microsoft Live Communication Conversations by TeeCee

TeeCee
Fri Apr 11 06:18:02 CDT 2008

Thank you very much. This is very helpful. Have a good day!

"Dobromir Todorov" wrote:

> I guess it is more for compliance but that seems to converge with Security
> these days.
>
> Here is what you need:
> http://download.microsoft.com/download/B/2/0/B208490C-57A3-4A09-9FFC-4AEB7AF3447C/LCSComplianceWhitePaper.doc
>
> --
> ---
> HTH,
> Dobromir
>
> Learn more about Security and Identity Management:
> Visit http://www.iamechanics.com
>
> "TeeCee" <TeeCee@discussions.microsoft.com> wrote in message
> news:6DB4C0AF-44EF-4D5E-BE1F-9682187FB7DA@microsoft.com...
> > How do you log the IM conversations of end users in a corporation for
> > security purposes?
> >
> > This is a loaded question, I'm sure. It is for Security.
>
>
>

Top